COPPA 2.0
Children and Teens' Online Privacy Protection Act (COPPA 2.0) (S. 836, 119th Congress)
Would expand COPPA-style protections to teens (13-16) and add stronger constraints including limits on targeted advertising to minors. Often paired politically with KOSA.
Jurisdiction
United States
Enacted
Pending
Effective
TBD
Enforcement
FTC + State AGs
Reintroduced March 4, 2025; in Senate Commerce Committee
Congress.govWhy It Matters
Fastest path to national "minors privacy" baseline reaching beyond COPPA's under-13 scope.
At a Glance
Applies to
Harms addressed
Who Must Comply
- Covered operators of websites/online services accessible to minors under 17
Obligations fall on:
Safety Provisions
- Expands protections to minors 13-16 (beyond COPPA under-13 baseline)
- Stronger limits on targeted advertising to minors
- Prohibition on transferring minors' data without affirmative consent
- "Eraser button" rights for minors' data
- Enhanced FTC enforcement authority
Compliance & Enforcement
Penalties
Penalties pending regulatory determination
View on map
United States
Focus Areas
Cite This
APA
United States. (n.d.). Children and Teens' Online Privacy Protection Act (COPPA 2.0) (S. 836, 119th Congress).
Related Regulations
COPPA
Baseline US children's data privacy regime. Applies to operators of websites/online services directed to children under 13, and to general-audience services with actual knowledge they collect personal info from under-13 users.
KOSA
Would establish duty of care for platforms regarding minor safety. Passed full Senate 91-3 in July 2024; passed Senate Commerce Committee multiple times (2022, 2023). Not yet enacted.
IL HB 5511
Requires covered operators of online platforms to apply protective default settings to users they know to be minors, including limits on algorithmic feeds, a 10 p.m. to 7 a.m. notification curfew and no autoplay by default on addictive social media platforms, and establishes a device-level age-bracket signal that Internet-enabled device manufacturers must provide and operators must request. Announced by the Governor as the Children's Social Media Safety Act, the title of the bill as introduced. Enforced by the Attorney General.
IA SF 2417
Establishes requirements and guidelines for conversational AI services including AI disclosure to minors, prohibition on sexually explicit content for minors, prevention of deceptive human-like interactions, and parental controls for children under 13.
CO HB 1263
Imposes obligations on conversational AI service operators including minor-user protections, suicide and self-harm protocols, prohibition on emotional dependence and engagement gamification, and annual safeguard reporting.
Finland AI Act
Finland's EU AI Act implementation using decentralized supervision model. Traficom serves as single point of contact and coordination authority. Ten market surveillance authorities share enforcement across sectors. New Sanctions Board handles fines over EUR 100,000.
Last updated January 22, 2026. Verify against primary sources before relying on this information.